Vulnerability Management Service Lead

Salary: £70,000 - 75,000 per year

Requirements:

• Significant experience in Vulnerability Management, Cyber Security Governance, GRC, or Security Operations Governance roles
• Strong understanding of the end-to-end vulnerability management lifecycle
• Experience implementing and governing risk-based remediation programmes
• Proven ability to work across complex enterprise environments and multiple delivery partners
• Strong stakeholder management skills with the ability to influence technical and non-technical audiences
• Experience producing executive-level reporting and communicating cyber risk to senior leadership
• Knowledge of recognised security frameworks and standards such as NIST Cyber Security Framework, ISO 27001, NCSC guidance, and Secure by Design principles
• Hands-on experience with vulnerability management platforms such as Tenable, Qualys, or Brinqa
• Experience working within defence, government, public sector, or other highly regulated environments
• Relevant cyber security certifications
• Eligible for SC Clearance required
• Sole British national

Responsibilities:

• Lead the enterprise vulnerability management service and governance framework
• Drive vulnerability remediation activities through internal teams and third-party suppliers
• Establish and maintain vulnerability reporting, metrics, KPIs, and executive dashboards
• Prioritise vulnerabilities using risk-based methodologies including CVSS, EPSS, Known Exploited Vulnerabilities (KEV), and business criticality
• Manage exception processes, remediation timelines, and security risk governance
• Provide assurance, oversight, and challenge across a multi-supplier service environment
• Present vulnerability trends, risk exposure, and remediation performance to senior stakeholders
• Ensure audit readiness, evidence management, and compliance alignment
• Identify opportunities for process improvement, automation, and service maturity enhancement

Technologies:

• Security

More:

We are seeking an experienced Vulnerability Management Service Lead to take ownership of a mature vulnerability management capability within a highly regulated enterprise environment. This is a hybrid position with onsite attendance in either Preston or Inverness approximately two days per week, with flexibility depending on business requirements. We offer the opportunity to lead a critical cyber security function within a large-scale enterprise environment, exposure to complex and high-profile technology estates, ongoing professional development and training opportunities, access to experienced cyber security professionals across governance, operations, engineering, architecture, and compliance disciplines, flexible and hybrid working arrangements, a comprehensive benefits package, and long-term career progression within a growing cyber security practice.

last updated 37 week of 2026